Bookkeeping / Accounting services spam from Microsoft OutLook Part 2





--_000_TY4P301MB1524148A7B8CB8EF7716892FE1F42TY4P301MB1524JPNP_

Content-Type: text/plain; charset="us-ascii"

Content-Transfer-Encoding: quoted-printable



Hi,



Hope you're well.



Are you interested in hiring a remote Accountant or Bookkeeper on a full-ti=

me or hourly basis at a competitive cost?



We offer bookkeeping, accounting, payroll, financial reporting, and tax ser=

vices.



Please let me know if you'd like to discuss further.



Regards,

Jaisal Andrews



From: Jaisal Andrews

Sent: Tuesday, June 23, 2026 4:39 PM

To: jaisalandrews.webconsultant@outlook.com
ant@outlook.com>

Subject: RE: Bookkeeping / Accounting Services?





Hi,







Do you currently need support with Accounting, Bookkeeping, Payroll, Tax, C=

FO Advisory, or FP&A? We help businesses improve finance operations efficie=

ntly and cost-effectively.







Open to a brief conversation?







Best regards,



Jaisal Andrews



From: Jaisal Andrews

Sent: Thursday, June 18, 2026 5:17 PM

To: jaisalandrews.webconsultant@outlook.com
ant@outlook.com>

Subject: Bookkeeping / Accounting Services?



Hii,



I wanted to connect to see if your firm ever considers remote accounting, b=

ookkeeping, or tax support during busy periods.



We specialize in Accounting, Bookkeeping, Tax Preparation, Tax Planning, Fi=

nancial Reporting, Accounts Payable & Receivable Management, Bank Reconcili=

ations, Payroll Processing, and other back-office accounting services. Our =

team is available on demand to support your operations efficiently and cost=

-effectively.



Would you be available for a quick call to discuss how our remote accountin=

g and bookkeeping services could support your business at your convenience?



Many thanks for your attention, Jaisal Andrews



Note: If this isn't relevant, feel free to reply "Opt-out"



--_000_TY4P301MB1524148A7B8CB8EF7716892FE1F42TY4P301MB1524JPNP_

Content-Type: text/html; charset="us-ascii"

Content-Transfer-Encoding: quoted-printable




osoft-com:office:office" xmlns:w=3D"urn:schemas-microsoft-com:office:word" =

xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" xmlns=3D"http:=

//www.w3.org/TR/REC-html40">




>








break-word">



Hi,
n>



 
span>



Hope you're well.
:p>



 
span>



Are you interested =

in hiring a remote Accountant or Bookkeeper on a full-time or hourly basis =

at a competitive cost?



 
span>



We offer bookkeepin=

g, accounting, payroll, financial reporting, and tax services.
span>



 
span>



Please let me know =

if you'd like to discuss further.



 
span>



Regards,=



Jaisal Andrews=



 
span>






0in 0in">


e">From:
Jai=

sal Andrews




Sent: Tuesday, June 23, 2026 4:39 PM


To: jaisa=

landrews.webconsultant@outlook.com



Subject: RE: Bookkeeping / Accounting Services?

>





 



Hi,



 



Do you currently need support with Accounting, Bo=

okkeeping, Payroll, Tax, CFO Advisory, or FP&A? We help businesses impr=

ove finance operations efficiently and cost-effectively.



 



Open to a brief conversation?



 



Best regards,



Jaisal Andrews



 
span>






0in 0in">


e">From:
Jai=

sal Andrews




Sent: Thursday, June 18, 2026 5:17 PM


To: jaisa=

landrews.webconsultant@outlook.com



Subject: Bookkeeping / Accounting Services?







 



Hii,



 



I wanted to connect to see if your firm ever conside=

rs remote accounting, bookkeeping, or tax support during busy periods.=



 



We specialize in Accounting, Bookkeeping, Tax Prepar=

ation, Tax Planning, Financial Reporting, Accounts Payable & Receivable=

Management, Bank Reconciliations, Payroll Processing, and other back-offic=

e accounting services. Our team is available

on demand to support your operations efficiently and cost-effectively.
>



 



Would you be available for a quick call to discuss h=

ow our remote accounting and bookkeeping services could support your busine=

ss at your convenience?



 



Many thanks for your attention, Jaisal Andrews<=

/o:p>



 



Note: If this isn’t relevant, feel free to rep=

ly “Opt-out”











--_000_TY4P301MB1524148A7B8CB8EF7716892FE1F42TY4P301MB1524JPNP_--

Bookkeeping / Accounting services spam from Microsoft OutLook Part 1

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 03 Jul 2026 08:04:32 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wfeVG-00000000Kd8-3dpX

for dave@doctor.nl2k.ab.ca;

Fri, 03 Jul 2026 08:04:26 -0600

Resent-From: The Doctor

Resent-Date: Fri, 3 Jul 2026 08:04:26 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-japanwestazolkn19011030.outbound.protection.outlook.com ([52.103.66.30]:5809 helo=OS0P286CU010.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wfbuL-00000000Dqd-1f3g

for root@nk.ca;

Fri, 03 Jul 2026 05:18:20 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=TYgrchaqMtzlcMorE3CbqKViWSyKZ4boezWYvwt/bmSQrIrRikorWpw19HPgr/iZ5b0uEfNLDGqFvsxKn36uT0vTYOOgREBzy4ad+MmgKwUXSVDoo6RpWNngiGaUN+Rfc3m87re445mV2L4Xxqs61I9IAPP3VsXur+OVilL8HEpfqscHk4JQ07hl5wMk5WWQ+BdjwEaUMlKGqYQ98ZuhKSjmHFijbYghAY2TjnhQfCg7qq/Miu05WZIqVlr3boVU6pSD5sXWDJxbuooe4wEFN7qqz3SNWgfHIExWvuzGp19o4Cxeq6D5uis5rVxOn9brWVYnqnpeaqF/HkkXN0RXOw==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=Da/L2cPPgjlewv5xwpqtZkuH67H9COXn15V9k43bzwo=;

b=PNlI5laGLCuHM95bmSK+KzOIlTvHV4J5zXaqMlCmEIfWj+xn2RQ+NXXTL72cCHoHRXzw/lGSzZMe1A0OVPx+iYnpfJMXQw55Swo1JuINZmH54AnsaYn9H57g1QO+vsksNTy6g/hvK6Vufos8J7Bdvn99SeUc9RP8AOkcBttzAxiZHyfvpemG2rOyEqCmV4+m7Jczsa1pXQHs+DLHUpUFg8nRpdtyF2lroCuUJWfiOiaow+L85nIBZSjIfVeXFIK49+6Naucu8gePqcoXvQSW3DLFplv7nVb1qLMdPeDwSzL527zQSIVmVGyWuwFjCszzu8AGEvOchz3/Io6xYoTRaA==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=Da/L2cPPgjlewv5xwpqtZkuH67H9COXn15V9k43bzwo=;

b=TO4bJmFCBa4waMgGO46qtZdALivIyYTAkGuPcFn/sXd/FbUNON6tiNcr5v65simv5IxfgBRxw20YhDJ+jXcomAQUY+G26A+WkHCZeMEG1jjbBvTW2OMJw1hRcaodfx1xstgZNYidbXqRbF1EsZ4173BQQ7nOT3oSEZMy3/IzbjP9wUFfurDnnFQtATUOwMbw5t2hYiHhc0F1JIiDBM/jqhOSgvYpIkVx+3vxmK+kVHfew6QrG3e3TbCETJicw8lfmRw99PQ2p/evnf1ImRsEJwrwCQwVIi2SRuV98yUdkVca30payrFvE9ffD6JvsbSpKw7UQl4JRMJzWAmmDcIJyw==

Received: from TY4P301MB1524.JPNP301.PROD.OUTLOOK.COM (2603:1096:405:297::13)

by TY5P301MB2137.JPNP301.PROD.OUTLOOK.COM (2603:1096:405:3e8::12) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.159.18; Fri, 3 Jul

2026 11:16:39 +0000

Received: from TY4P301MB1524.JPNP301.PROD.OUTLOOK.COM

([fe80::c03e:a5a7:c0da:7fe4]) by TY4P301MB1524.JPNP301.PROD.OUTLOOK.COM

([fe80::c03e:a5a7:c0da:7fe4%4]) with mapi id 15.21.0181.010; Fri, 3 Jul 2026

11:16:39 +0000

From: Jaisal Andrews

To: Jaisal Andrews

Subject: RE: Bookkeeping / Accounting Services?

Thread-Topic: Bookkeeping / Accounting Services?

Thread-Index: AQHc/xgyiNRUpR/hM0C4fUSAarCbd7ZL2ngAgASPsKCABj0GoIABy5/AgALlHzA=

Disposition-Notification-To: Jaisal Andrews



Date: Fri, 3 Jul 2026 11:16:38 +0000

Message-ID:



References:











































In-Reply-To:



Accept-Language: en-US

Content-Language: en-US

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: TY4P301MB1524:EE_|TY5P301MB2137:EE_

x-ms-office365-filtering-correlation-id: 7953066f-3660-46d9-dcd0-08ded8f48da6

x-microsoft-antispam:

BCL:0;ARA:14566002|15080799012|4140399003|704163111799003|2604032031799003|25010399006|37011999003|22091999003|24121999003|12121999013|12050799012|39105399006|8062599012|19110799012|13091999003|31061999003|8060799015|16051099003|24021099003|55001999006|12091999003|56899033|440099028|3412199025|102099032|41105399003|39145399003|40105399003|18071099003|1710799026;

x-microsoft-antispam-message-info:

=?us-ascii?Q?V8DXUaqft0AmrFc0WpuSKgHRT7YnGB1Ve98z2mYBXrMR33m+SCkdKq2dATLR?=

=?us-ascii?Q?2COrt/6oLiA2L6bWIxobnTCSTxeSY+WdQpeXR28e5/pcke24Dpde89kI6eeq?=

=?us-ascii?Q?5E/+38UddH/CFwg0bjzydMzqDYw91GoV9Dxmn5wUMp0YcVZLrCOLyfoUO4wM?=

=?us-ascii?Q?zinds+pnqCbYNNZ7gR5aStevLw51I04bw9HtpQxacXe719qth+aIuNhn8UHE?=

=?us-ascii?Q?24ce9vwCjZ4wv0u49TqlLQpZE8dFIWsCTCvn+x+qG3QGinmrybDJci7NluNl?=

=?us-ascii?Q?RZc/QRlXhHFxe5MnBwMmnIWXP0FaWHEGD2fiyeODASY3uqNVWl2KUDlpNtKf?=

=?us-ascii?Q?agNgQ7NgmSW433fT3cX5D8oqpdf7AwGIfoaEl7r+a5FXWK7lyalY5MDKsgxm?=

=?us-ascii?Q?nt0GGHgM+Dbf3gmSNBxdmm3fTb37/KWZ/cI3xlXr/zYLuvcROdPZrJ620CMt?=

=?us-ascii?Q?/WbCDykj3X2C1DdXdedChPhbA7IdctA6pf9qIlfbLuytSP9XnRO8ozqn6a9J?=

=?us-ascii?Q?OaUKGsDsV5U7MYv/Go/aKQrLoM4QOIl7T70fzBw8gKHR/pjKZRTLw/EzCX7r?=

=?us-ascii?Q?NHq0CfkACf9/+wwShRT8nGtjA7gcxG+2XH4qH9ycmBLCXOD72AFopYhmLuOQ?=

=?us-ascii?Q?KuQ7D6Z2VHeWIkytAep+wenibjc4B2PVI6bOKjHJZ4VVqEh6XCbDeH+3CxBR?=

=?us-ascii?Q?CpEiblLiaHilvIAoEQsqRQvnPIPhXzWQ3vo3J0tC027biw+e7T6frgUTBckD?=

=?us-ascii?Q?p7YqWAHIe1af/ioYkwPUccR4ISJfMF36YhPh89bnJYWJdnc+qIvrAKwQSPgi?=

=?us-ascii?Q?w1kXhNJHhdIESJb3l0uqd4hL5MIdkyJbwkK61py7JzeoqW359wiX0k3mrbKl?=

=?us-ascii?Q?qzaTh+K65rkIcgo2x4p6GXLSsJCiJqYU0QZxQ8cKPR47+5LbPMwhtU2ht7ql?=

=?us-ascii?Q?qE2EkrdZsnH1yOxIJijWjipvAtRQoacJB3maiM44wIGVKknNLSo1PXqRREnF?=

=?us-ascii?Q?YDb6FWYMF7Vg8d6cS6FEs34OwR7RucHslurvOwcC1Ri7uQJzHnVQBsOFBPf6?=

=?us-ascii?Q?xcJcFlKWHpUuQcXgjoPsGSvlVmUe6bMxplKvjVBgi26siG2Y4bCC7zmBA20h?=

=?us-ascii?Q?4CA6RVh4H/juXhLMQVrKsDxagfaB7VSRdCti2dGn6H+1+eqqPsAyeGlVb88z?=

=?us-ascii?Q?1yVjV1tawqbeK47+8GnnOiajlnXY+UxrsgryF/+VO/yvORCaOYSEc2cgHmBJ?=

=?us-ascii?Q?3mrbUrm0lViBWLibdVtMxOHs4ota3Sb3q/NtyJcsoRbRHMOhiq0mAoRjPR6a?=

=?us-ascii?Q?YeZSkXajuFuk/vn/YBAihGqEuYwhwwJR5XqL4exfigRCdRQ3MrbkkvRqau+Y?=

=?us-ascii?Q?I6syyC2is2+1kCaVja2oTcZB6pwt7AGvpucXqf8ihMG7oAKUe5beFi5GgDgz?=

=?us-ascii?Q?Pbq8jm6dp9I=3D?=

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?us-ascii?Q?GOHw4QvgDJxbfXD19gbQrddH1gOAm++5bhkWFRJQQv2YpSOGxqc1Ot6rt0Ln?=

=?us-ascii?Q?4efevTOcHkbgtecs66FHzHCKoStgpL6/73wYrVhre0jOBnXMZDjXEwaA2+LO?=

=?us-ascii?Q?KWsWqyyVzArpb711jRKUljr4ykYDhPP6oMVAZhDwS3OJk75Mrjh701GqMP40?=

=?us-ascii?Q?X6flIlRtFyIZ4gK5+Pw71UM1+UBAU6o6/utnxRmVQexbPkuZdtUj4G3MW+cB?=

=?us-ascii?Q?PkL9h8Xi58m0HMXa+s1TCl1Z4KmUW1IBKzsimkX4UAEj1jQ0pnPATdklbtz9?=

=?us-ascii?Q?h2E12sy1S7US6X/7mizYfPLCwncAysb+IdfOFpNAvoz41dNtk5iMuG2jhWYQ?=

=?us-ascii?Q?DGBo+U6mdwH09ww94pbU9Tvep/UBkDt7XF1GIIgBhf6WCO8/+OOXf0YFBXKJ?=

=?us-ascii?Q?afeezPBXPC20t95Cv9AJlwSJdsUoT7fK1jjNUmHLOqmEHrKNViEobY3iuvGP?=

=?us-ascii?Q?F7opiJi+0JnqHcu9FG1tse0LtSDLZVYNCMDptCfkCut+JbNdQOGv5JgHGkYG?=

=?us-ascii?Q?toLP6mpYpr+elMXDPe7iCKsUNOOCqdtWp5xk0yduLkRTM/1VHWmmLgw5flyY?=

=?us-ascii?Q?5jKYsp35bQ8U/yUSrTzzSS+8xM7wT79/dkvfKi8ohz/t1FAjp/zmgVE3PRPC?=

=?us-ascii?Q?mx7tSyQn+Fu3DT6JMplEfuM+8i/dpy78VYnc1sfjGLqb5k8uyyZ/lZw4/67v?=

=?us-ascii?Q?DR3SlfyMqiJMh/316/Ca2SvxGMACPxRA1GBSJ8kilY9B9MflhfcuiUkHh/+M?=

=?us-ascii?Q?HWIOQvHh9iAGxNI4Np3luHcrR6/Jq3ph/r0xe20d9Szc+ZjSttFae7nmxF0w?=

=?us-ascii?Q?Svy9pDoC6rlfiJ/UrK+jASI+TVAu6TaTTJmen6rFeQj8QKqnSQRPAs9eLN1d?=

=?us-ascii?Q?TQExlVe8W4WvrGQ7sjYLMlRHG9qB0F15GRK9MR4sg8wytUz+TBjZ123WiJof?=

=?us-ascii?Q?njmLHbLr5Q530gIShof9M59FS2YbCKKa4M+y0RqEEfO6Gvy/NI5LG82OHQNR?=

=?us-ascii?Q?A7isLm3jfVURQLNJmQImHY0FQVdxKjRBUzJrDz7bibbYDrF1bcwcUQwJf5H7?=

=?us-ascii?Q?YVwAOz72WAs73rrMoIERbqGUUq8OJra/ULmFqHyTw+htG+sUAEn0kAeSHc9D?=

=?us-ascii?Q?9hc/NCfI9zvOY5Jo+miIHIGtLcxXhQwco148fTsjE9teuGplk33pUyx95q7s?=

=?us-ascii?Q?0lvjoSiBJCyDN6mEAtbUtqFKA5Vya7dboNFUzzkqN4yMbn6z0vhpm9HWSbWh?=

=?us-ascii?Q?IATVTNE7nMQxVb9xvfKbjhV76rtWxwIhA7Xlg7i3sFwsf6AN9AFq688hr1cW?=

=?us-ascii?Q?Ko7DDwEUs10m9UX4cV/Zw4ha9AQ6ejUewvw+DV2rn/DdAK5DQdX4iFeYfQ6G?=

=?us-ascii?Q?0R7d8p5ovlZXxnffSg8c7VTyQx6PzO79IC/eEvkaqiaditpqvexNVy7iDCd+?=

=?us-ascii?Q?JOq78sXkz0s=3D?=

Content-Type: multipart/alternative;

boundary="_000_TY4P301MB1524148A7B8CB8EF7716892FE1F42TY4P301MB1524JPNP_"

MIME-Version: 1.0

X-OriginatorOrg: outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: TY4P301MB1524.JPNP301.PROD.OUTLOOK.COM

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: 7953066f-3660-46d9-dcd0-08ded8f48da6

X-MS-Exchange-CrossTenant-originalarrivaltime: 03 Jul 2026 11:16:38.6221

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: TY5P301MB2137

Web/SEO/App spam from Microsoft Oulook Part 2

--_000_MW4PR03MB6394675057250A4AEFBAF93DC7F42MW4PR03MB6394namp_

Content-Type: text/plain; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable



Hi,

I am still waiting for your reply. Please let me know.

If you are interested in my services below?

Thank you!

________________________________

From: alka kumari

Sent: 16 June 2026 02:13

Subject: Results-driven SEO that works.



Hello,



I came across your website and really liked the design. With a few SEO twea=

ks, it could rank much higher on Google.



Our team focuses on improving search visibility and driving organic traffic=

.



Can I send you our SEO plan and pricing details?



Thanks,



Alka



--_000_MW4PR03MB6394675057250A4AEFBAF93DC7F42MW4PR03MB6394namp_

Content-Type: text/html; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable








1">








_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">

Hi,



d-color: rgb(255, 255, 255); margin: 1em 0px; font-family: Aptos, Aptos_Emb=

eddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: =

12pt; color: rgb(0, 0, 0);">

I am still waiting for your reply. Please let me know.



d-color: rgb(255, 255, 255); margin: 1em 0px; font-family: Aptos, Aptos_Emb=

eddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: =

12pt; color: rgb(0, 0, 0);">

If you are interested in my services below?



d-color: rgb(255, 255, 255); margin: 1em 0px; font-family: Aptos, Aptos_Emb=

eddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: =

12pt; color: rgb(0, 0, 0);">

Thank you!








11pt; color: rgb(0, 0, 0);">

From: alka kumari <alka.kumari902@outlook.com>


Sent: 16 June 2026 02:13


Subject: Results-driven SEO that works.


 





font-size: 13pt; color: rgb(0, 0, 0);">

Hello,



font-size: 13pt; color: rgb(0, 0, 0);">

 



font-size: 13pt; color: rgb(0, 0, 0);">

I came across your website and really liked the design. With a few SEO twea=

ks, it could rank much higher on Google.



font-size: 13pt; color: rgb(0, 0, 0);">

 



font-size: 13pt; color: rgb(0, 0, 0);">

Our team focuses on improving search visibility and driving organic traffic=

.



font-size: 13pt; color: rgb(0, 0, 0);">

 



font-size: 13pt; color: rgb(0, 0, 0);">

Can I send you our SEO plan and pricing details?



font-size: 13pt; color: rgb(0, 0, 0);">

 



font-size: 13pt; color: rgb(0, 0, 0);">

Thanks,



font-size: 13pt; color: rgb(0, 0, 0);">







font-size: 13pt; color: rgb(0, 0, 0);">

Alka








--_000_MW4PR03MB6394675057250A4AEFBAF93DC7F42MW4PR03MB6394namp_--

Web/SEO/App spam from Microsoft Oulook Part 1

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 03 Jul 2026 08:03:32 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wfeU8-00000000KWf-2XDY

for dave@doctor.nl2k.ab.ca;

Fri, 03 Jul 2026 08:03:16 -0600

Resent-From: The Doctor

Resent-Date: Fri, 3 Jul 2026 08:03:16 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-eastusazolkn19012073.outbound.protection.outlook.com ([52.103.11.73]:61934 helo=BL0PR03CU003.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wfbkm-00000000D9K-3ofa

for sales@nk.ca;

Fri, 03 Jul 2026 05:08:27 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=yYKBIMn+L0drZLslrwvW6rHqWC8w8AQludcFCo9lBAHO3p3Ic4XEhWyHUlWogb9j747C5gMcgkyCAR7U0szszLoUEbr1V+vCwp362XTUA4pIjHvmlvH5elexxhRWROpLrF0pSJa9wsfypi/5jsrSoqGvP/Uii6jfgTIDPafd28ostrGmD/WdjxXhWGOdtH7iTQammfrQP1nA/07DLKAcPvtZnxFSmdA8mwNXJSj++jnoaF/gIM0Aa9NkzvOVs84HA5Pq7OdXr5QSezyC93xUJcKuk76saL/oDDxC+DCNPgekrqAaQd7IiplBgwSwIhUDZymS8BkS0SCd4oX1qpONPw==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=nvTaFi5fM3ThlomZfuk0axdFwFctZWVYhtZuZtkG0XY=;

b=JOX13tPrG/dTGRcNJ9vAiAQyxPyZe4xUiT5BymHnwXLPRqnWH0ZNgOmuESRqRUWuDTQjbEPcz/rXGS2/6xTTI0upDk+8srVmNgHjf5CP60PIeif50JK00Y6vsITJksDlEIOVdz819MXl/1SDYr41Jv6uqfW83udA2Qv3SRNy3h9ncLk6zqZi8VeQJXFHLLf1tUsFOwerUuGEC9vctzcKd9HCxPYMakOahUSaZBROWYyZnv81E+PnIfaUwa6pjGdwaDVFJycOhqrqKR9CHPZFzIpsZlTk2Jd7M0pWhW+GDbLN8zHygf4N8YYvuO/YLIu+KacpruA2mbnQ5EAvrAhfZA==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=nvTaFi5fM3ThlomZfuk0axdFwFctZWVYhtZuZtkG0XY=;

b=UrRqDkFiDx0zD3WPMjMRjh4n917zZpenj0oSD8JfdSZjDszvaQanLrlG9gbr7EwxfOWJpuqTyT4d8eXSWtWrnpIePYK7mYX37Hilwqlo0Iufi9ma6eVFnx2LjALn0rHk6lf0Qb7QL4zhT7HwcHyzYj7ir+dCh6PLgWMpMmfNYa20N7hxR4P26bztktYdCj+gjyVspRzTwNGeiqTkAKRNjECQu3Wk5UwqZrxndLoWkPeJ3Yel43uvoJaW0XlVSNL2dgxm72/ovZm556ms+obVcVp+Y+2Vqdr1OXU26LOuQlrdftJ4f9ihqpNL6/yd7sO2VVetlgYVH6GSNVdlrf39tg==

Received: from MW4PR03MB6394.namprd03.prod.outlook.com (2603:10b6:303:121::9)

by MN6PR03MB7597.namprd03.prod.outlook.com (2603:10b6:208:4f3::12) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.181.8; Fri, 3 Jul 2026

11:07:17 +0000

Received: from MW4PR03MB6394.namprd03.prod.outlook.com

([fe80::262a:e64e:7b94:17d0]) by MW4PR03MB6394.namprd03.prod.outlook.com

([fe80::262a:e64e:7b94:17d0%3]) with mapi id 15.21.0181.009; Fri, 3 Jul 2026

11:07:16 +0000

From: alka kumari

To: alka kumari

Subject: Re: Cost//...

Thread-Topic: Cost//...

Thread-Index: AQHdCtwHARxKyMr/OUeZFwCqE8WxzrZbombo

Date: Fri, 3 Jul 2026 11:07:16 +0000

Message-ID:



References:













In-Reply-To:



Accept-Language: en-GB, en-US

Content-Language: en-GB

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

msip_labels:

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: MW4PR03MB6394:EE_|MN6PR03MB7597:EE_

x-ms-office365-filtering-correlation-id: 6d233eb9-fbea-40fb-fc21-08ded8f33e35

x-microsoft-antispam:

BCL:0;ARA:14566002|15080799012|15030799006|22091999003|24121999003|4140399003|37011999003|25010399006|37102599003|19110799012|45011099003|8062599012|55001999006|8060799015|31061999003|39105399006|3412199025|440099028|102099032|40105399003|51015399003|26121999007|18071099003|1710799026;

x-microsoft-antispam-message-info:

=?iso-8859-1?Q?L+6Jp2Jwp34p1EzlvX9mpF+BJC4NvZKWYZ4fDdcxfninC34utIq5rrNvNG?=

=?iso-8859-1?Q?U73wiwBgvq765xJAvIKjKRd5l15wvs0DNs4FEO95CJjJYIJnAuyzkOXxI5?=

=?iso-8859-1?Q?NITtYAx9eIXhbLArXPtOeMFgjx2wbld2peC45BbblRkJGS104aAqB8RhVU?=

=?iso-8859-1?Q?900Iy2qj7lp2VAJupfjBofg63DmOR5s0aAgihdDikIe4Tjl5YdMN+fXWxq?=

=?iso-8859-1?Q?KdRcpwZT66uK2ngA1vnukDm6kbKItDhcFYlwN1Z9k9pDemhekU+ocJgo9j?=

=?iso-8859-1?Q?cTwHkPaHaZSDjJXWxzi3qPdx3f54SFeaI58CObamvGp/f9uoDMFyGeYis0?=

=?iso-8859-1?Q?+RjqcNtCpyU4CYpPHyxW8cWWD0rFpLc5O4/Wn8qQX0NrSzJhyxP32FFxHk?=

=?iso-8859-1?Q?tvchNXte6ui+lbVs2sTw5sZF1ai/VH87d7WC8yIEW5x233tmznwOHWsd7J?=

=?iso-8859-1?Q?NqM6RSTlV742U1i0xuJVujNvKn+7CuMuCj53dkMr9optueQsA+nr98rb9s?=

=?iso-8859-1?Q?Go4sKoVwIE+K/mlaw8dmwRYt5oPiYOhYCh97wi1g5BWR2lL5tJVCCWbFJ4?=

=?iso-8859-1?Q?72dmbWek6x8XESORvYJVJayYxLFD5iL9oTCOeaGyRfofyi6J87WhEpwyO6?=

=?iso-8859-1?Q?3+DBQgliRZh/z7Q0s0gJmuB0Rnz4XJG731JqtDnxYY97bW0ww4OTFeCgS0?=

=?iso-8859-1?Q?4lk8h/4FgGrEyMS26o8BSJchza3vcnaaFzpLvaIfbqLLtYJxhBDd+7xPjg?=

=?iso-8859-1?Q?VBsFLkOvqr8dWPhp+BFlSmEHSTlRUmYiwr4knkW705vBdaCRLvX5uqxpqn?=

=?iso-8859-1?Q?GyvhsLL6EVP1oV5/col1ldKgNp/cLng3lLqV0+pSypq4oMvQeAzZl7d94Z?=

=?iso-8859-1?Q?kqA30D0kvbMnCkAFAWf8quA+fxc7jSqBoX0DKJ0tpVRvu6cVRuFN3AtNyD?=

=?iso-8859-1?Q?00KNt2PIpa8/DW2wokETvi6YwxTOUsMWVI+uUYxVELfJNpgaYR5vddz9Mz?=

=?iso-8859-1?Q?X7BPXKPwtD/0NA/eC2dpJN124Xb6vqwMdnHFVpVyAvm6Q/hWs4IteEy0tU?=

=?iso-8859-1?Q?QORe8AeploGJw/5QPuOCK7cu/RTMARobroW4hLxoyb1XNVz9FbtrG4Myyi?=

=?iso-8859-1?Q?Iy015wHjmUinoUZP9fg8HeCvUVVSlLF20X1vp8cfeUh6+WRgvjPtsnzYbu?=

=?iso-8859-1?Q?ygwflyPyxN9KtYvDxGUbK+Fnt0KOZSbTWEy6D0siiLBMBVqlNFvcG33XJ6?=

=?iso-8859-1?Q?P0LVEt62wfz5Si8kyN1I5jIIc9Tv1ewxoBCmMUrGIGdziU2P+qBrPmhtvc?=

=?iso-8859-1?Q?PUvv?=

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?iso-8859-1?Q?TdDq9LmPVnGpBxBDLD/mr0Sg0SrkxdIuRXAO+3a5lwU/GoQbEtus/czTv5?=

=?iso-8859-1?Q?N1UG8gshxsMh4GWEGSAEnYEkMf+9K9S5EXVOgJT//wIlgyht4pmJh+pHrr?=

=?iso-8859-1?Q?V1nu2IcEzyML1tIgKaL71Cud+g9CxVDM5jIlk5KQcmFXiD/qd5w4bw5ffE?=

=?iso-8859-1?Q?sm2eaExEAYXJ6HGkhlZKQOEkFezn2j1F3pKYxPr/yNjjtgRibk5fqmMu03?=

=?iso-8859-1?Q?aI9WyYwZGaMBvmkCa78mxUoL6pjBv/CTJ6AccCEJJnM+XpOL43Wcg3vlus?=

=?iso-8859-1?Q?7RPOkjxQ9/fQOG8VDsKTDqhaT5fJfEf7ugzeswkcgp65jLYrOyuI69EMxl?=

=?iso-8859-1?Q?RW//AxwsYpvELQ6zbFXukbtCYp+6133JeP5tP02LSYIjwxJL/mO+GuQYLo?=

=?iso-8859-1?Q?HjXGjLTJuzxlD6Rg4ir/aW1Zn/RGbScq546ahyHNkc2N6R0H70PQCcP28f?=

=?iso-8859-1?Q?iHcQMr8ddBp6Dr9iNLVjWfy53sJUhFOkNKQz7T6io8t07456VN4ZZsWqua?=

=?iso-8859-1?Q?w24qUne8fOA1SKUZkQmtMHuhxio957EfX1+qFh3sFHtaRiR/MAxdkXcC/8?=

=?iso-8859-1?Q?ElnOXYyzJe7+SIzcDYBBS4UmSkFbq62keDl/UAUAnVUfR/n21LKQ0Rl4zA?=

=?iso-8859-1?Q?JzB5R92957YdR/4219PfuDQZq+psOd48c+h1SGxLI5HUeriZi+nCDOveM9?=

=?iso-8859-1?Q?G4uKSPS4rbK7X5ZDqeZuhUkdOY+f/j/QZEPLQQLWxewZsUq5fJPJoLQIzG?=

=?iso-8859-1?Q?/hu00ZUiMl5fM/e88p7l5Rr0rMnxxLaodVXKQaUHGGmp5+g6APtR+jdMnH?=

=?iso-8859-1?Q?/2qXyf0yF+PbwHR5//bziIyPUnxCZuXhd4D6CvBYaqzNlAztDHewjVMUUX?=

=?iso-8859-1?Q?e1X51UL49tU6ELZYLfmqNt3jHQmzyw4bmQc7oeccb6eqe8/QI3FXx+8N3E?=

=?iso-8859-1?Q?izBTYOZG1a3H2ni+FAr8tsm20x2YGnBaT3Py5nMdGilSmQUGGhPpJDJsUQ?=

=?iso-8859-1?Q?I6gjCIja0LxvnDA+Aadvmuh23M+oI9yguTNJHZXna8tfpq/G44aakAfetd?=

=?iso-8859-1?Q?+nq91RG73Z31nUD7OLJ0zsIxKND5y5fEM4aa8gjT2FPny4l5duLV/uW5ob?=

=?iso-8859-1?Q?Tu48myfgXenwkSbqJ22CpffSQWCjTh/q69Ig0ietHPSKovQ+Tt4ZVqf8TD?=

=?iso-8859-1?Q?LsGRrRI/U4Cat+VonYOR98c/yAO1F+/gC8H/dhcnC+hw2+1GESspg4uOK6?=

=?iso-8859-1?Q?h4ahzhiUBeUyTwgzbDRtNLW4EkguJ9HMYeZ75VwI66R6v/KI15d2TGz4OT?=

=?iso-8859-1?Q?Rpab3rDf7OaFR7OpU09EsU47hg/4lBAXAdu15WzV7ULSm+qMEvWeTGela9?=

=?iso-8859-1?Q?Y41cwi+dNTrZ6hxOh5VXvCqrTv5m+0V1JNo2YTBFeh0tlXH85rCmFxvdyu?=

=?iso-8859-1?Q?ZPup4BHxeHKFY1NmTvFZGwD1tCcu+a5mKjZo8wiGozZKRpThvfxqy3JINo?=

=?iso-8859-1?Q?kowbg4zZ4MbsIteFKyP1Hm?=

Content-Type: multipart/alternative;

boundary="_000_MW4PR03MB6394675057250A4AEFBAF93DC7F42MW4PR03MB6394namp_"

MIME-Version: 1.0

X-OriginatorOrg: outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: MW4PR03MB6394.namprd03.prod.outlook.com

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: 6d233eb9-fbea-40fb-fc21-08ded8f33e35

X-MS-Exchange-CrossTenant-originalarrivaltime: 03 Jul 2026 11:07:16.5347

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: MN6PR03MB7597

PersistIQ spam from Google Gmail

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 03 Jul 2026 08:03:32 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wfeTt-00000000KVa-31fT

for dave@doctor.nl2k.ab.ca;

Fri, 03 Jul 2026 08:03:01 -0600

Resent-From: The Doctor

Resent-Date: Fri, 3 Jul 2026 08:03:01 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-qt1-f179.google.com ([209.85.160.179]:49337)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wfbfo-00000000CgM-1bCY

for root@nk.ca;

Fri, 03 Jul 2026 05:03:17 -0600

Received: by mail-qt1-f179.google.com with SMTP id d75a77b69052e-51bf2479349so2878521cf.2

for ; Fri, 03 Jul 2026 04:02:21 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=persistpipelineops.pro; s=google; t=1783076535; x=1783681335; darn=nk.ca;

h=mime-version:date:content-transfer-encoding:subject:to:from

:references:in-reply-to:message-id:from:to:cc:subject:date

:message-id:reply-to;

bh=O+gI0X3a/qfeECSjazz4MTYYU4lvWDAsewy4K3ppoJ8=;

b=JeuZpN4RpCqPxEo/2PmGOUcqH9pNjDhWEhIx1tOHmhJerPYMKYl6OxCqGSr78bDc27

6TGd8MwBwnHWsdGm1eAG6aljXlAVYFbZVfo5lVczE2HDhw/QClU6e9JgAFCN7/0cGpbJ

FAE0e8QqN1ZSpVr+vNaH+JK2qOOVDPE7Zz9P05Qam8LXD9t4cOMNNcTMXEHMqZhaUgfe

leejKLcCg8A7YBMyX0HNrw/hcN5Rf3sqqYo9MxFvQLfAxNfq58iK7RRfXQJmtLCgG6zR

3MtPbV94Z2+jt7zsqhg64nvSJOiKN/Xgyl2wpgsS+vihq/7UnY3p6E374gGy/2QiyA9l

CM2Q==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1783076535; x=1783681335;

h=mime-version:date:content-transfer-encoding:subject:to:from

:references:in-reply-to:message-id:x-gm-gg:x-gm-message-state:from

:to:cc:subject:date:message-id:reply-to;

bh=O+gI0X3a/qfeECSjazz4MTYYU4lvWDAsewy4K3ppoJ8=;

b=DkkgTMM7cfPniuIOJV9TwdrUv4826QkUfp5sBsn20goSf9+6xX8okqezuzYMfY7ILX

BFwmvV3oRghGNJA6qLOV3WHWPRpT+cTv457BpEfgqXEL2kXckQPc3CRAKeOuMO+TELrE

XN1asDmX0v8NBZ+HFnTe4f9wgjalBqQgmsrnCQo91oykmqYMIT34xBEUHR8JSKKRuhNY

c+s89R2bZHltIjnvbUViwputjehZquLANNIsWAqpGlp3E73jNAIvAauH8N9v8ywwmNvR

ZVdTfFzGSV6I5RssktUBAXXI5IAOYT4xfBX6CRGUYbl+b9vL8IGYKzC//uCKkvUtSK5A

2hQA==

X-Gm-Message-State: AOJu0YyuRAMn/ldLCa8UAPF3rMh1NB6JAK+gjGmEp9q/rSF8wfLIEDCv

iHSTUe1oJCya6kQwz/dVbXue9ZCPwrb9SHmLOEHdqU2HW0DUgzvFJ+KPHAtWrSDKqjrfdBSKmob

9o/KGTQ==

X-Gm-Gg: AfdE7ckEuVKmU6fglak5/RNn679cs0x6MP5kKbrFe8qGqpsfyxPF7Fq5+BpL/LDpsn6

pNVBZOehVLV0nHrqjD9CzT+3HZpvlzTEa2LB/q14FtNuBQIwwgUkfGcEpPdPGijSVSxzQXqQdq2

lsFfM2xgmTgHJbSesV91aqajfhDTnotFL85n5hpK0C01JGUYFXNFwYP6dq1tA8E2x5cDnUADIks

0IGICzP+U730P5YxMAgyrwjUrecAVKlDud8F/X8IbCw2Kjphtt6uTJdw4dAeosdabPOKeOZQ0PK

QDVChNMVHVM347zNGqLgcjfz648Nxu/LM/m827/sRlqLMnwn2CqLn5OOgRO618I3EmGNUz0yqGs

Isp9XdKNuKUX8Z8eJ4f87hiacNaaWt/E6uQUMRC2gFrANcfiT48qln8Z17cORIxXaNEB8VFz3mO

HlxsQ45QTcWuXyZWzVpNCQWLYS7aNb5rFRgcbjs69ZK8ru1rSHC+7juwLgzjj59xgeiUTnorx8+

3GCz4UNmBMJ93R911DP3cZ7YzE/2m4aPnQUOmd97mtI0713gm5MgQ==

X-Received: by 2002:a05:622a:4205:b0:51c:21d1:3862 with SMTP id d75a77b69052e-51c26a3be8fmr139248201cf.8.1783076534838;

Fri, 03 Jul 2026 04:02:14 -0700 (PDT)

Received: from 019f27a4-b784-787e-8fc1-6458e989115d.local (ec2-100-53-155-212.compute-1.amazonaws.com. [100.53.155.212])

by smtp.gmail.com with ESMTPSA id d75a77b69052e-51c41b55495sm14445411cf.11.2026.07.03.04.02.14

for

(version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);

Fri, 03 Jul 2026 04:02:14 -0700 (PDT)

Message-ID: <019f27a4-b784-787e-8fc1-6458e989115d@persistpipelineops.pro>

In-Reply-To: <019f15d6-db19-7526-a562-54915909167c@persistpipelineops.pro>

References: <019f15d6-db19-7526-a562-54915909167c@persistpipelineops.pro>

X-Mail-Abuse-Inquiries:

https://app.instantly.ai/privacy/report-abuse/019f27a4-b784-787e-8fc1-6458e989115d

From: Gabriella Brooks

To: root@nk.ca

Subject: Re: clients for internet services

Content-Transfer-Encoding: quoted-printable

Date: Fri, 03 Jul 2026 11:02:14 +0000

MIME-Version: 1.0

Content-Type: text/plain; charset=utf-8



Hi,



Following up on my last note: we help service providers find clients =

using personalized outreach.



Best,

-Gabriella





Sent from my iPhone



On Tue, June 30, 2026 12:03 AM, Gabriella Brooks
ops.pro>

[gabriella@persistpipelineops.pro]> wrote:



> Hey,

>=20

> I was looking into how service providers like NK are handling clients =

growth, and wanted to connect.

>=20

> We're currently partnering with =

several firms like yours, and connecting them with individuals and =

businesses actively looking for internet services.

>=20

> We'd love to help you do the same. Got 15 minutes this week to chat about=

growing your clients base?

>=20

> Best,

> -Gabriella

> PersistIQ

>=20

> P.S: let me know if irrelevant.

>

Nigerian spam

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 02 Jul 2026 18:56:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wfSBy-00000000JPO-2EZm

for dave@doctor.nl2k.ab.ca;

Thu, 02 Jul 2026 18:55:42 -0600

Resent-From: The Doctor

Resent-Date: Thu, 2 Jul 2026 18:55:42 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from wagin357.hostpapavps.net ([208.79.219.17]:48498)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wfRTt-00000000F5Z-0u2A

for doctor@nl2k.ab.ca;

Thu, 02 Jul 2026 18:10:18 -0600

DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed;

d=test.destiwellness.com; s=default; h=Message-Id:Date:Reply-To:MIME-Version:

Content-Type:To:Subject:From:Sender:Cc:Content-Transfer-Encoding:Content-ID:

Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc

:Resent-Message-ID:In-Reply-To:References:List-Id:List-Help:List-Unsubscribe:

List-Subscribe:List-Post:List-Owner:List-Archive;

bh=hXQygRUk2uuLazBoqDOB9kdVDPPjTI53tN8mpkMxhIA=; b=mfMQR5XXap6a7BalMTXWj6SyxC

kobj3/2cNnk6aBW8GZecocz+O6rDCdGqm2MCLK69icFYYC52CpaKMLQrLPAgiBhkwWbNt0KrWqliE

Pr4k0hfiQbjO/mxJJ6YKyt6nXHvbutT4dy04uhnXCVfWfs//b8PbR1ID7w5L2v0722OtbOMSHkL61

djLVqlJeuBghylbDriyExYqyLlhwqbJWCg8+WJSRRJ9wUw0mhbKVG9O7DjzszoWjt1c3MM8Ng5oCm

xKRlKY+s7w5x2qAPGqfqDFxJpGymcZXQz6k6z6SoY42+Po1z47+o3W0t3I3vZINsgajNQQFlAx7sK

yxkCdtyA==;

Received: from [199.91.100.152] (port=23936 helo=DESKTOP-MO50RVL)

by wagin357.hostpapavps.net with esmtpsa (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.99.4)

(envelope-from )

id 1wfRT1-0000000Cf96-3JCq

for doctor@nl2k.ab.ca;

Fri, 03 Jul 2026 00:09:15 +0000

From: "breeden sarah"

Subject: Action Required

To:

Content-Type: multipart/alternative; boundary="Ol0gN2mBm63oiFnun7QVQPOhFqhnnBt=_h"

MIME-Version: 1.0

Reply-To:

Date: Thu, 2 Jul 2026 17:09:14 -0700

Message-Id: <02122026070917F639834732-B86F6AF8D9@test.destiwellness.com>

X-AntiAbuse: This header was added to track abuse, please include it with any abuse report

X-AntiAbuse: Primary Hostname - wagin357.hostpapavps.net

X-AntiAbuse: Original Domain - nl2k.ab.ca

X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]

X-AntiAbuse: Sender Address Domain - test.destiwellness.com

X-Get-Message-Sender-Via: wagin357.hostpapavps.net: authenticated_id: maria.smith@test.destiwellness.com

X-Authenticated-Sender: wagin357.hostpapavps.net: maria.smith@test.destiwellness.com

X-Source:

X-Source-Args:

X-Source-Dir:

X-Spam_score: 9.8

X-Spam_score_int: 98

X-Spam_bar: +++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Nicht beanspruchte Gelder wurden unter Ihrem Namen registriert.

Bitte kontaktieren Sie Sarah Breeden und geben Sie zur Überprüfung Ihren

vollständigen Namen an. Bitte beachten Sie: Wenn diese Nachricht in Ihrem

Spam- oder Junk-Ordner erscheint, können Sie die Warnmeldung ignorieren,

da automatische E-Mail-Filter aktiv sind



Content analysis details: (9.8 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[208.79.219.17 listed in dnsbl.ahbl.org]

[208.79.219.17 listed in dnsbl.ahbl.org]

[208.79.219.17 listed in dnsbl.ahbl.org]

[208.79.219.17 listed in dnsbl.ahbl.org]

[199.91.100.152 listed in dnsbl.ahbl.org]

[199.91.100.152 listed in dnsbl.ahbl.org]

[199.91.100.152 listed in dnsbl.ahbl.org]

[199.91.100.152 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[208.79.219.17 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[208.79.219.17 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[208.79.219.17 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[208.79.219.17 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[199.91.100.152 listed in will-spam-for-food.eu.org]

[199.91.100.152 listed in will-spam-for-food.eu.org]

[199.91.100.152 listed in will-spam-for-food.eu.org]

[199.91.100.152 listed in will-spam-for-food.eu.org]

[199.91.100.152 listed in will-spam-for-food.eu.org]

[199.91.100.152 listed in will-spam-for-food.eu.org]

[199.91.100.152 listed in will-spam-for-food.eu.org]

[199.91.100.152 listed in will-spam-for-food.eu.org]

[208.79.219.17 listed in will-spam-for-food.eu.org]

[208.79.219.17 listed in will-spam-for-food.eu.org]

[208.79.219.17 listed in will-spam-for-food.eu.org]

[208.79.219.17 listed in will-spam-for-food.eu.org]

[208.79.219.17 listed in will-spam-for-food.eu.org]

[208.79.219.17 listed in will-spam-for-food.eu.org]

[208.79.219.17 listed in will-spam-for-food.eu.org]

[208.79.219.17 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[199.91.100.152 listed in sbl-xbl.spamhaus.org]

1.5 RCVD_IN_CBL RBL: Received via a relay in cbl.abuseat.org

[Listed by XBL, see ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[breeden.sarah11(at)gmail.com]

2.7 UNCLAIMED_MONEY BODY: People just leave money laying around

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[208.79.219.17 listed in bl.score.senderscore.com]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From

Subject: {SPAM?} Action Required



This is a multi-part message in MIME format



--Ol0gN2mBm63oiFnun7QVQPOhFqhnnBt=_h

Content-Type: text/plain; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable





Nicht beanspruchte Gelder wurden unter Ihrem Namen registriert. Bitte =

kontaktieren Sie Sarah Breeden und geben Sie zur =DCberpr=FCfung Ihren=

vollst=E4ndigen Namen an.



Bitte beachten Sie: Wenn diese Nachricht in Ihrem Spam- oder Junk-Ordn=

er erscheint, k=F6nnen Sie die Warnmeldung ignorieren, da automatische=

E-Mail-Filter aktiv sind



--Ol0gN2mBm63oiFnun7QVQPOhFqhnnBt=_h

Content-Type: text/html; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable








8859-1">


le=3D1">
itle>Action Required



Uncla=

imed funds have been registered in your name. Please contact Sarah Bre=

eden and provide your full name for verification.

 

&=

nbsp;

 

 

Please note: If this message app=

ears in your spam or junk folder, you can ignore the warning, as autom=

atic email filters are active.







--Ol0gN2mBm63oiFnun7QVQPOhFqhnnBt=_h--



Dragonfly/Intelcom phish from Godaddy mail

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 02 Jul 2026 18:56:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wfSBc-00000000JOV-2Mch

for dave@doctor.nl2k.ab.ca;

Thu, 02 Jul 2026 18:55:20 -0600

Resent-From: The Doctor

Resent-Date: Thu, 2 Jul 2026 18:55:20 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from intranet.graceworks.org ([64.207.153.176]:50268)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wfQfy-000000001gc-04Xh

for sales@nk.ca;

Thu, 02 Jul 2026 17:18:42 -0600

Received: from bhcareorg by adedc.tempdomain.com with local (Exim 4.99.4)

(envelope-from )

id 1wfQf9-000000000g0-2NKr

for sales@nk.ca;

Thu, 02 Jul 2026 23:17:43 +0000

To: sales@nk.ca

Subject: Intelcom Delivery Notification

X-PHP-Script: wmail.bethanyvillagehomecare.org/ecpyfbw/tjq1ufe/dk1qaxf/index.php for 196.75.47.209

X-PHP-Originating-Script: 1017:index.php

Date: Thu, 2 Jul 2026 23:17:43 +0000

From: Intelcom

Message-ID: <78c90ef2bfed88a0a5735946c100e585@wmail.bethanyvillagehomecare.org>

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="b1_78c90ef2bfed88a0a5735946c100e585"

Content-Transfer-Encoding: 8bit

X-AntiAbuse: This header was added to track abuse, please include it with any abuse report

X-AntiAbuse: Primary Hostname - adedc.tempdomain.com

X-AntiAbuse: Original Domain - nk.ca

X-AntiAbuse: Originator/Caller UID/GID - [1017 995] / [47 12]

X-AntiAbuse: Sender Address Domain - wmail.bethanyvillagehomecare.org

X-Get-Message-Sender-Via: adedc.tempdomain.com: authenticated_id: bhcareorg/from_h

X-Authenticated-Sender: adedc.tempdomain.com: support@wmail.bethanyvillagehomecare.org

X-Source:

X-Source-Args: php-fpm: pool wmail_bethanyvillagehomecare_org

X-Source-Dir: bethanyvillagehomecare.org:/wmail.bethanyvillagehomecare.org/ecpyfbw/tjq1ufe/dk1qaxf



This is a multi-part message in MIME format.



--b1_78c90ef2bfed88a0a5735946c100e585

Content-Type: text/plain; charset=UTF-8

Content-Transfer-Encoding: 8bit



















Â













Intelcom







Delivery Update



Your package is currently being processed and requires a small fee for customs handling.



Amount due: 2.96 CAD



Please confirm your delivery details to ensure a smooth delivery experience.

Manage My Delivery





This is an automated message. Please do not reply.



© 2026 Intelcom Express



















--b1_78c90ef2bfed88a0a5735946c100e585

Content-Type: text/html; charset=UTF-8

Content-Transfer-Encoding: 8bit



















Â














Intelcom









Delivery Update





Your package is currently being processed and requires a small fee for customs handling.





Amount due: 2.96 CAD





Please confirm your delivery details to ensure a smooth delivery experience.



Manage My Delivery






This is an automated message. Please do not reply.





© 2026 Intelcom Express

























--b1_78c90ef2bfed88a0a5735946c100e585--



BTS PAyPal phish from Microsoft OUtlook Part 4



Haresasz Nxysarwsa has invited you to PayPal Transaction Successful – BTC Order Pending Completion

Title: PayPal Transaction Successful – BTC Order Pending Completion

When: July 2, 2026

Organizer:

Haresasz Nxysarwsa

Description: Dear Customer,



Thank you for your recent PayPal payment. Your Bitcoin order has been received and is now awaiting final confirmation.



Order Summary:



Asset Purchased: Bitcoin (BTC)

Payment Method: PayPal

Total Amount: $500.00

Status: Pending Completion



Please allow a short period for processing as our system validates the transaction details.



If you do not recognize this payment, please call +1 656 556 2170 immediately.



Best Regards,

Order Processing Department

Attendees:



cynthiaperez389903@groups.outlook.com



PayPal Transaction Successful – BTC Order Pending Completion

Dear Customer, Thank you for your recent PayPal payment. Your Bitcoin order has been received and is now awaiting final confirmation. Order Summary: Asset Purchased: Bitcoin (BTC) Payment Method: P



Dear Customer,



Thank you for your recent PayPal payment. Your Bitcoin order has been received and is now awaiting final confirmation.



Order Summary:



Asset Purchased: Bitcoin (BTC)

Payment Method: PayPal

Total Amount: $500.00

Status: Pending Completion



Please allow a short period for processing as our system validates the transaction details.



If you do not recognize this payment, please call +1 656 556 2170 immediately.



Best Regards,

Order Processing Department

Kedy

štvrtok 2. júl 2026

Organizátor

Haresasz Nxysarwsa

haressaznzxrrsxaxz321@gmail.com

Hostia

(Zoznam hostí bol na žiadosť organizátora skrytý)

Odpoveď na cynthiaperez389903@groups.outlook.com

Áno



Nie



Možno

Ďalšie možnosti



Pozvánka z Kalendára Google



Túto správu ste dostali, pretože ste účastníkom danej udalosti.



Ak túto pozvánku prepošlete, ktorýkoľvek jej príjemca bude môcť odoslať odpoveď organizátorovi, byť pridaný do zoznamu hostí, pozývať iných bez ohľadu na ich vlastný stav pozvánky alebo meniť vaše potvrdenie účasti. Ďalšie informácie

BTS PAyPal phish from Microsoft OUtlook Part 2

X-Microsoft-Antispam-Message-Info:

=?utf-8?B?UnNCdllzY1lneHpUZWp0d1BFcVB2SVkrNDlXSXh3VzU5b2VmMllvTVhYQmp5?=

=?utf-8?B?cGdOQWt1VVVrbEJXekNNQm1hWElBSmtyWHZuNml2aWV0QkJxRkE2UEE2S2Qx?=

=?utf-8?B?VEpuYU94d2g1T2txSFgyaFduVForU2thOWo1cHNKcHFtQWIvSlJHQ0U0K09m?=

=?utf-8?B?U2RwazdlK3ByajZhSk5DRXNyRy9jWWZLYy80QXNRUGRlaUdiTTVyWDRNMC9I?=

=?utf-8?B?Q1NqS0Z3NVRmeWttTE0xdTB1WHZnQ0pNdis2dlRNazNKMGtoeDFKQ3RPZjF4?=

=?utf-8?B?VXhsQmNYelphUUtvUk91YUhQU0ZWMENnYkxHNmEwRDdLcmNNcE5hZVFQMHB1?=

=?utf-8?B?RmRNM1R2d0pleE02RENRUE5XMzJhdVM3OERJdXd6dHFzdG1Dc3cyaC9COVBL?=

=?utf-8?B?dytRWHZzZmxDQXZ6bUpjWFRuaVRPeFpJNzZCejkxcysrUUJhTTlKRk0yK2wy?=

=?utf-8?B?RlhqK1hNS1FMR3lBZlZTSjVkZGJ3MDVxNGtPMytQYm16WnFMRHVEQUp4SUdZ?=

=?utf-8?B?dUE4ZVluOHZUQkhQM1NNL09NbFMzcm5ja0U2ajU2YnNpcjdxclZIc3FiNUdZ?=

=?utf-8?B?dmZzM2NXdWtPak9veStmd0xBQWlqQ0dWT3JvbjRMTUxOdk1ZUmRDMWNpRU42?=

=?utf-8?B?dEpSRmtNL3cvYzRlZ0RZY0cyME14cXlRS3pPTTF4dWJ1V0I2MzRXazkzZURZ?=

=?utf-8?B?WkV5NngycHk5RGo0RkJmU3FMY1ZiREt4SmoxL2FDNis5Q005RGtRVVc2YUd6?=

=?utf-8?B?TkczRjBSallnQjhrWjJocW8xQlFpeWdaa2dOdFhkSFEzVWZyaEo2YUt0TzVt?=

=?utf-8?B?OWVSRXdjQ2RmdldPYWphc2pDSnNIbXQ2Q1NDYmQ1bzJmQUxaSDZiTWxzMVNY?=

=?utf-8?B?UkNaMUpNZU9pZnc1L29HY0k1aDAyb0U5MzE3dHZvMlJnc0R6S0hhSHBaNHBV?=

=?utf-8?B?cFI4SFZ2U3FtVmRqVnRxY0pnd2RkUUFXTkU2VG1SWGFyS3BYT1I3WmhOWU9U?=

=?utf-8?B?andWamFnZUkwTmg2djhPR3FXTkJmVExkcjc0L2dUOHZ5eGl4ZjJHU0lHcWow?=

=?utf-8?B?ekhuK3lzWU5DRnd2MElWZ0xVNnFORlZubVpxRW1uQ3pnQys1TlRyc0U0RXBE?=

=?utf-8?B?SzREVTI3WlRJeDVZK0paVEZkdkFISTAycTZOVlhpa2hjRGltNE0yQ2pzcFF5?=

=?utf-8?B?N2tCV09UOWF4VTdBNC82N3RYdk11K2pyVXJyYnJCN0hVa29mcWRVbWhGUTd3?=

=?utf-8?B?YlRDL0g3RnFHak9YYktsQVgvZXNKZzhHUmh4TlB5VGsxQnRQWDB0MGtlS2I0?=

=?utf-8?B?YXk4NWdiYkRDdUh2dEk1UGVFRUdCeDdYNUdXMitGbkJEVlNjRDBiNnduaW15?=

=?utf-8?B?aUlhZEQyU2FFNytGU3JCa0d6NlRMTTUyOWJmUHYrU29jRllJZG9FMitGblJE?=

=?utf-8?B?ell5MzV2aEEyR29qQjdrdnNnZ3dCQjFPbGRuandrNDNMNzFqTDM3UnNmUWVW?=

=?utf-8?B?bWlxOFpXMy9paUFYSHNFdHloaGYrc00veDdjRStsVWppRHhlYldTTE9qeG90?=

=?utf-8?B?OFhyd1VXR0lyRUQwVlU0TTBZL2NqUDYzQThqTTkzR1Iyc0NsL25FQTQvYVdy?=

=?utf-8?B?SExLUzg0ZjlvU0JFTHd2NzJHd0VEYTNkV244dFFJU2p5M0s5cjVPM25HZjJs?=

=?utf-8?B?b1RKdDh6QWliV0U0QUd1WlZPZ1RHUno0SW9wV1ZnbWNDSlAzd2tXMUlWdXNt?=

=?utf-8?B?eXZiYUNMTHp5TmFXMkVlU0hTVHhtbHh1MnlEb2owbmV1QmRxUHRCd1JDQi8r?=

=?utf-8?B?U2lOMitTUWZPWTlqQVlpY0xsdnpoQlRtNzRSTzJMMkpGbzl0WGFjT1ZNRjNP?=

=?utf-8?B?LzBGZXRtTHg1ZlR0L3E5V0lib3hNMDJEWm5KRTF5MDcxZnBZbklhb1IvSmN0?=

=?utf-8?B?MFBZbVErVjlYbTF6WkozK0x2T1dTWkpYQ3ljclBIbFJSSWR1azg5ZTBPMThI?=

=?utf-8?B?anUxamJ1NVdXRFlWd05UN2RPdEMxQ2tURkwxd2JYd1pQczZxSkVSYktQbWtM?=

=?utf-8?B?YUd1a1lhUm5GTGpZY3g0MkdCWDFBclM1UDdIcGU0ZGJXOElBRmJxSUFtWTBo?=

=?utf-8?B?eG12dnBaYUJsQ1NKMmI0QVpFM2FPM0tYWkx3T3JsQWw0WGJVOFlyby9NcEZB?=

=?utf-8?B?bHZJRk1HUGZBQU9CMWRnYzdTQXdpWE5ac2R4cXdGUlc0RXBGNWd1alZUVlJw?=

=?utf-8?B?aHNmUFZkMURNTE54OGt3amhNeHUvZmcvVG5WVzgvT1R6L1JZSkRCOFBKak1Z?=

=?utf-8?B?OEpibmVSd0ZXMHI1dE9ZSjZOL0ptYm04NjY1NFNqQkdHb2VJRElsT09md3Z1?=

=?utf-8?B?TFo1S09tbFRPcWxBNEVwWWVoZDZ4S0JkVXlmaHptTXZKQjB4a0orVjZOYVh6?=

=?utf-8?B?czh4ZFptYWtCbDZrcWxTdmd6ZlkxSzA3M0lxZ09kVW5pQlFkVlFqVnZlRWhX?=

=?utf-8?B?MkN0VXpraldKZDBFSENraEZPQkdKMEpmZEZvbzFYUEtud0NiMEZpVlMxRCsr?=

=?utf-8?B?ZngvMUU3YjEyM2JpV3JIVnRzUjhSWGovTEdYQ2h0OWtXY1Z0VnQrWHhLcmdO?=

=?utf-8?B?cUo3ODBwN2ZKM0JJOElhbGZ3czFxVkp5d29JU2Mxd3ptb0NLNEc1SjhxQ0d5?=

=?utf-8?B?Zjd1NHdhTEtXZXY5emJzRTJxSDhoQ0hMbjdmdVFrVzYza2hQakhONkNnRTVm?=

=?utf-8?B?MmJNSUh3QVV3aUJKcisrTFF3dXNKNnFpUG1mR2o5Uk1OZjdVbk8rWFMyRVRN?=

=?utf-8?B?QjRBbGhxV3dTRkI0SXozbXhvWXdqaTR1Y0FWaVRuaHEycFk5c3p2aU5WSWJB?=

=?utf-8?B?aUxlamh5ODJaVlErdWt1dHJEQ3hwSmJPY2xRTEZDWStLVFhKd1NKY0NicEpH?=

=?utf-8?B?WkhEcjNqWURGR0dYVThWMlUxOWhNdDRHZitNRHBkdXZJdGVKSDRlMVYyakVR?=

=?utf-8?B?RVNoRTRLQUh1OHE5M0hBeXZhcisveGVhSkIrRjBuc2NDcUlad0dpL3ZBVzNC?=

=?utf-8?B?d2kvMlI3aWV0ejlUNCtCU2FpeERXaXdHb0JFM05YNnhmbnlMekYxdXd2RXRK?=

=?utf-8?B?bTdBV2w1bVJFYkdLVU9FTlltSEdtQ1N5bE50UzRaVW55QnpvZFE4eWljS1c2?=

=?utf-8?B?QjM2YlBnM0tjMGFYTklXeUQxNjMwRzF3TXVINVBiQUxnSENLZ2FsWGZNNjZM?=

=?utf-8?B?Z1AxZUtqRkNHWGVNRzIzc0ZSNVloajlQV0tRNWZhdktxZXFDeGdhVWdoZDY1?=

=?utf-8?B?V0FyTmgzaVBkeG1LaXdHVy9ZVGkwVngwbXZrdG5tNmUxb2pGbC9BN09mSFdT?=

=?utf-8?Q?+Wlvr5g3XscUmudDd7iJH?=

X-Auto-Response-Suppress: DR, OOF, AutoReply

X-OriginatorOrg: sct-15-20-9412-4-msonline-outlook-090a5.templateTenant

X-MS-Exchange-CrossTenant-OriginalArrivalTime: 02 Jul 2026 16:43:11.1717

(UTC)

X-MS-Exchange-CrossTenant-Network-Message-Id: 53405f02-fd79-45c3-c921-08ded85900e7

X-MS-Exchange-CrossTenant-Id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-AuthSource: BL6PEPF0001AB54.namprd02.prod.outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Anonymous

X-MS-Exchange-CrossTenant-FromEntityHeader: Internet

X-MS-Exchange-Transport-CrossTenantHeadersStamped: MW5PR18MB5065

X-Spam_score: 13.7

X-Spam_score_int: 137

X-Spam_bar: +++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: PayPal Transaction Successful – BTC Order Pending Completion

štvrtok 2. júl 2026 Dear Customer, Thank you for your recent PayPal payment.

Your Bitcoin order has been received and is now awaiting final confirmation.





Content analysis details: (13.7 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[40.93.2.53 listed in dnsbl.ahbl.org]

[40.93.2.53 listed in dnsbl.ahbl.org]

[40.93.2.53 listed in dnsbl.ahbl.org]

[40.93.2.53 listed in dnsbl.ahbl.org]

[2603:10b6:408:fb:0:0:0:16 listed in]

[dnsbl.ahbl.org]

[2603:10b6:408:fb:0:0:0:16 listed in]

[dnsbl.ahbl.org]

[2603:10b6:408:fb:0:0:0:16 listed in]

[dnsbl.ahbl.org]

[2603:10b6:408:fb:0:0:0:16 listed in]

[dnsbl.ahbl.org]

[2603:10b6:408:fb:cafe:0:0:66 listed in]

[dnsbl.ahbl.org]

[2603:10b6:408:fb:cafe:0:0:66 listed in]

[dnsbl.ahbl.org]

[2603:10b6:408:fb:cafe:0:0:66 listed in]

[dnsbl.ahbl.org]

[2603:10b6:408:fb:cafe:0:0:66 listed in]

[dnsbl.ahbl.org]

[209.85.128.69 listed in dnsbl.ahbl.org]

[209.85.128.69 listed in dnsbl.ahbl.org]

[209.85.128.69 listed in dnsbl.ahbl.org]

[209.85.128.69 listed in dnsbl.ahbl.org]

BTS PAyPal phish from Microsoft OUtlook Part 3

Content analysis details: (13.7 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[40.93.2.53 listed in dnsbl.ahbl.org]

[40.93.2.53 listed in dnsbl.ahbl.org]

[40.93.2.53 listed in dnsbl.ahbl.org]

[40.93.2.53 listed in dnsbl.ahbl.org]

[2603:10b6:408:fb:0:0:0:16 listed in]

[dnsbl.ahbl.org]

[2603:10b6:408:fb:0:0:0:16 listed in]

[dnsbl.ahbl.org]

[2603:10b6:408:fb:0:0:0:16 listed in]

[dnsbl.ahbl.org]

[2603:10b6:408:fb:0:0:0:16 listed in]

[dnsbl.ahbl.org]

[2603:10b6:408:fb:cafe:0:0:66 listed in]

[dnsbl.ahbl.org]

[2603:10b6:408:fb:cafe:0:0:66 listed in]

[dnsbl.ahbl.org]

[2603:10b6:408:fb:cafe:0:0:66 listed in]

[dnsbl.ahbl.org]

[2603:10b6:408:fb:cafe:0:0:66 listed in]

[dnsbl.ahbl.org]

[209.85.128.69 listed in dnsbl.ahbl.org]

[209.85.128.69 listed in dnsbl.ahbl.org]

[209.85.128.69 listed in dnsbl.ahbl.org]

[209.85.128.69 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[40.93.2.53 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[40.93.2.53 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[40.93.2.53 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[40.93.2.53 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.128.69 listed in will-spam-for-food.eu.org]

[209.85.128.69 listed in will-spam-for-food.eu.org]

[209.85.128.69 listed in will-spam-for-food.eu.org]

[209.85.128.69 listed in will-spam-for-food.eu.org]

[209.85.128.69 listed in will-spam-for-food.eu.org]

[209.85.128.69 listed in will-spam-for-food.eu.org]

[209.85.128.69 listed in will-spam-for-food.eu.org]

[209.85.128.69 listed in will-spam-for-food.eu.org]

[2603:10b6:408:fb:cafe:0:0:66 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:408:fb:cafe:0:0:66 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:408:fb:cafe:0:0:66 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:408:fb:cafe:0:0:66 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:408:fb:cafe:0:0:66 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:408:fb:cafe:0:0:66 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:408:fb:cafe:0:0:66 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:408:fb:cafe:0:0:66 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:408:fb:0:0:0:16 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:408:fb:0:0:0:16 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:408:fb:0:0:0:16 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:408:fb:0:0:0:16 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:408:fb:0:0:0:16 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:408:fb:0:0:0:16 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:408:fb:0:0:0:16 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:408:fb:0:0:0:16 listed in]

[will-spam-for-food.eu.org]

[40.93.2.53 listed in will-spam-for-food.eu.org]

[40.93.2.53 listed in will-spam-for-food.eu.org]

[40.93.2.53 listed in will-spam-for-food.eu.org]

[40.93.2.53 listed in will-spam-for-food.eu.org]

[40.93.2.53 listed in will-spam-for-food.eu.org]

[40.93.2.53 listed in will-spam-for-food.eu.org]

[40.93.2.53 listed in will-spam-for-food.eu.org]

[40.93.2.53 listed in will-spam-for-food.eu.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[40.93.2.53 listed in list.dnswl.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[40.93.2.53 listed in bl.score.senderscore.com]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[40.93.2.53 listed in wl.mailspike.net]

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

-0.0 SPF_PASS SPF: sender matches SPF record

1.0 HK_RANDOM_FROM From username looks random

1.0 HK_RANDOM_REPLYTO Reply-To username looks random

0.5 FROM_LOCAL_NOVOWEL From: localpart has series of non-vowel letters

3.5 VOWEL_FROM_7 Impronouncable from header (7+ consecutive vowels)

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[haressaznzxrrsxaxz321(at)gmail.com]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[haressaznzxrrsxaxz321(at)gmail.com]

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

0.6 MEGALONGWORD BODY: Uses really overlong words

0.3 LONGWORD BODY: Uses overlong words

0.1 TW_RW BODY: Odd Letter Triples with RW

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

3.0 LONG_INVISIBLE_TEXT Long block of hidden text - bayes poison?

0.2 FREEMAIL_FORGED_FROMDOMAIN 2nd level domains in From and EnvelopeFrom

freemail headers are different

0.1 TO_IN_SUBJ To address is in Subject

Subject: {SPAM?} =?UTF-8?Q?Pozv=C3=A1nky=3A_PayPal_Transaction_Successful_=2D_BTC_Order?=

=?UTF-8?Q?_Pending_Completion_=40_=C5=A1t_2=2E_j=C3=BAl_2026_=28cynthiaperez389903=40g?=

=?UTF-8?Q?roups=2Eoutlook=2Ecom=29?=



BTS PAyPal phish from Microsoft OUtlook Part 1

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 02 Jul 2026 14:40:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wfOBl-00000000Ail-1MFs

for dave@doctor.nl2k.ab.ca;

Thu, 02 Jul 2026 14:39:13 -0600

Resent-From: The Doctor

Resent-Date: Thu, 2 Jul 2026 14:39:13 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-eastusazlp17011053.outbound.protection.outlook.com ([40.93.2.53]:55824 helo=BL2PR02CU003.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wfKWN-00000000BJL-3tes

for doctor@doctor.nl2k.ab.ca;

Thu, 02 Jul 2026 10:44:29 -0600

Received: from BN9PR03CA0041.namprd03.prod.outlook.com (2603:10b6:408:fb::16)

by MW5PR18MB5065.namprd18.prod.outlook.com (2603:10b6:303:1a9::13) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.181.8; Thu, 2 Jul 2026

16:43:11 +0000

Received: from BL6PEPF0001AB54.namprd02.prod.outlook.com

(2603:10b6:408:fb:cafe::66) by BN9PR03CA0041.outlook.office365.com

(2603:10b6:408:fb::16) with Microsoft SMTP Server (version=TLS1_3,

cipher=TLS_AES_256_GCM_SHA384) id 15.21.181.9 via Frontend Transport; Thu, 2

Jul 2026 16:43:11 +0000

Authentication-Results: spf=pass (sender IP is 209.85.128.69)

smtp.mailfrom=gmail.com; dkim=pass (signature was verified)

header.d=google.com;dkim=pass (signature was verified)

header.d=gmail.com;dmarc=pass action=none header.from=gmail.com;compauth=pass

reason=100

Received-SPF: Pass (protection.outlook.com: domain of gmail.com designates

209.85.128.69 as permitted sender) receiver=protection.outlook.com;

client-ip=209.85.128.69; helo=mail-wm1-f69.google.com; pr=C

Received: from mail-wm1-f69.google.com (209.85.128.69) by

BL6PEPF0001AB54.mail.protection.outlook.com (10.167.241.6) with Microsoft

SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.181.6

via Frontend Transport; Thu, 2 Jul 2026 16:43:11 +0000

X-IncomingTopHeaderMarker:

OriginalChecksum:D16D66D7C904E7F3A17106EC017B2319D8073A9235C61EF82B82F5B54EF6E84F;UpperCasedChecksum:EEFA245AFD5616934EA644AA8C92C203DDD4CE88CF1CEBA5F48C30C7B10C0FA8;SizeAsReceived:3536;Count:15

Received: by mail-wm1-f69.google.com with SMTP id 5b1f17b1804b1-493ae2a6a72so15429555e9.0

for ; Thu, 02 Jul 2026 09:43:11 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=google.com; s=20251104; t=1783010590; x=1783615390; darn=groups.outlook.com;

h=content-type:to:from:subject:date:message-id:sender:reply-to

:mime-version:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=CVQcRV2LDnnnEu4HJp63hoBHVxl8U508EGEkzdzD4nc=;

b=BGnTntHA1jUARIyBci1hCREvVMlCpyGB5LK7lGqqGgn2eh4O/kLtKmqm4m3L1w37Qh

ZNRxZ0d2mJnjvA6uSNnogVYsMZHWcUx2qUmPVR1a3wfPzhGELTTw8W7FqkLIoiisKIJb

jxCZKkj0iufg9MXPEaFdA2C3ymCD5m4IIp6/8dQTYDyyqEuIb20SxX+M5GC+l6qdOxC6

ruX0eLqYqw2JTEZJ/zg0oQE0EUI8x+7SkTatVTeSfpoAvWLMPGeQXMbpRw08OYYv3sMT

A2AonkhsNho28Q1710Jo2lGfNQcqYknzVJPoYbdRVEIqXVzixiOYTVwBF028DQN/lunH

diPw==

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20251104; t=1783010590; x=1783615390; darn=groups.outlook.com;

h=content-type:to:from:subject:date:message-id:sender:reply-to

:mime-version:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=CVQcRV2LDnnnEu4HJp63hoBHVxl8U508EGEkzdzD4nc=;

b=a5jTtPcySvhnlTibGBSqywe/uA+XwTiaABeNY5FTJW/DuPJsYi+qF2/8FnNV7SJoI7

OWhD/uFKuO8F2di3GdxujaibUxyUsXQZVx7xmXaiL4cRH1u/+TRpXrww+tTjlvq7rXg1

j8NleG4se7MiDaOLBG9lZDrmutMhTlFipm0H/iezKVXnW+vuen9uFRIGztOW8cOJRScL

QsPBA/kK2fpWvhkjvc+hJ2cGe2vVRCjeWD0fp8xfiZP9gDsp904aFjtzc83gbYNBMAO1

TeA0ii75ZlebQv8miUHqtiUs/96fRjtgTvGxYO2zi5UYZXW9DItOuY0djfWjclUeTdYb

4c7g==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1783010590; x=1783615390;

h=content-type:to:from:subject:date:message-id:sender:reply-to

:mime-version:x-gm-message-state:from:to:cc:subject:date:message-id

:reply-to:content-type;

bh=CVQcRV2LDnnnEu4HJp63hoBHVxl8U508EGEkzdzD4nc=;

b=BWNQeGrkJGZRo0RWRwWL4V2u1tPMotLAHamdhJoQAFMvogMqGxx247w9XYPG12mpPD

8NkL/EGSGp1IMAH1wFzykpBIQUujL0jeeayvdyRKSr9B2T/n2Qt1X8SG1q8IVTqzggif

kfrtp8f7dbK4YygppGTA+I8JdP6aGumAgCZy2n1YxjuM9jL0z+a3+aQqX4RLJs54RIs8

/TvhE6DCO05yuqNn+Zj5rvh1WbUoSQdkPofl9M8YDJcZI09P//cLZfi8oNShR3Hx8rOc

yWoOmwQ1D2BytaXpldPGvoSBYpeZXlIJQA+3OpLKEbf5Ua8eCMu2tgJc7kvfFCZm7Fpo

MHEw==

X-Gm-Message-State: AOJu0YzLhDIIIY2RGhRImbHvgwcKM+8gKZqz7wjbXVmkrKbolZUGFgC4

9iwFF6P1d8dNmyAWA53Ym0VygqlOrObrz9peox21K/8N2s4oZc5uIBUaZxbAK8gM5CoYwVSreLy

4DI9a8UkzWAlskaY6+d2Z/VK5Gwkd+8Hh2V0=

MIME-Version: 1.0

X-Received: by 2002:a05:600d:6452:20b0:493:a8eb:5142 with SMTP id

5b1f17b1804b1-493c3cd4ab0mr69615545e9.5.1783010589966; Thu, 02 Jul 2026

09:43:09 -0700 (PDT)

Reply-To: Haresasz Nxysarwsa

Sender: =?UTF-8?Q?Kalend=C3=A1r_Google?=

Message-ID:

Date: Thu, 02 Jul 2026 16:43:09 +0000

Subject: =?UTF-8?Q?Pozv=C3=A1nky=3A_PayPal_Transaction_Successful_=2D_BTC_Order?=

=?UTF-8?Q?_Pending_Completion_=40_=C5=A1t_2=2E_j=C3=BAl_2026_=28cynthiaperez389903=40g?=

=?UTF-8?Q?roups=2Eoutlook=2Ecom=29?=

From: Haresasz Nxysarwsa

To: cynthiaperez389903@groups.outlook.com

Content-Type: multipart/mixed; boundary="000000000000d889fb0655a38042"

X-IncomingHeaderCount: 15

X-EOPAttributedMessage: 0

X-EOPTenantAttributedMessage: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa:0

X-MS-PublicTrafficType: Email

X-MS-TrafficTypeDiagnostic: BL6PEPF0001AB54:EE_|MW5PR18MB5065:EE_

X-MS-Office365-Filtering-Correlation-Id: 53405f02-fd79-45c3-c921-08ded85900e7

X-Sender-IP: 209.85.128.69

X-MS-Exchange-EOPDirect: true

X-SID-PRA: HARESSAZNZXRRSXAXZ321@GMAIL.COM

X-SID-Result: PASS

X-MS-Consumer-Group-Expansion-Loop: cynthiaperez389903@groups.outlook.com

X-MS-Exchange-Group-Expansion-Loop: cynthiaperez389903@groups.outlook.com

X-Microsoft-Antispam:

BCL:0;ARA:1444111002|4040799016|6092099016|32020799003|26130799012|26000799027|9000799056|9400799043|16001999021|1680799066|970799063|24102599021|5139299004|22000799015|9020799019|34130799006|16200799027|6019299003|3151999006|29080799009|26104999009|440099028|3412199025|21002599022;

Chinese products spam

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 02 Jul 2026 14:40:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wfOC2-00000000Akz-3XzR

for dave@doctor.nl2k.ab.ca;

Thu, 02 Jul 2026 14:39:30 -0600

Resent-From: The Doctor

Resent-Date: Thu, 2 Jul 2026 14:39:30 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-m158225.netease.com ([47.251.158.225]:28162)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wfKnT-00000000DoK-1p8a

for sales@nk.ca;

Thu, 02 Jul 2026 11:02:10 -0600

Content-Type: multipart/alternative; BOUNDARY="=_Part_1991693_185639118.1783011657155"

To: sales

Reply-To: sales23@abiscircuits.com

Subject: =?UTF-8?B?UmU6UmU6RnVsbCB0cmFjZWFiaWxpdHkgZm9yIHlvdXIgbWVkaWNhbCBQQ0JBcw==?=

X-Priority: 3

MIME-Version: 1.0

Received: from diana@abiscircuits.cn( [10.139.1.59] ) by ajax-webmail ( [127.0.0.1] ) ; Fri, 3 Jul 2026 01:00:57 +0800 (GMT+08:00)

From: Diana

Date: Fri, 3 Jul 2026 01:00:57 +0800 (GMT+08:00)

X-WM-Tid: 0a9f23c6c5a5d0c0kusybea8e5ac27eea4

DKIM-Signature: a=rsa-sha256;

b=dIbHQ9qQNisjUtmKU6JFJAiVXAoH8JW3mHxhz8Rj+O9HYO3GOq8mS2yNPXqRz3iT3iWIIr9qefq3yqMewTmQYVlfa6Pboyx2f9jzA0Cdm8LyB49UxmqWC+QoS268Nu9xGYGrANIEgCxFIlrHqVP6efs9dB0Y+UazqtdZObuAZEs=; c=relaxed/relaxed; s=default; d=abisassembly.net; v=1;

bh=uEAGZgdYlSBmQqHq7r4XO9X3PCRUjRx6yEtdr+W3ot4=;

h=date:mime-version:subject:message-id:from;

Message-ID:







Hi sales,

I hope everything is going well for you.it's Diana again .



May l know if you are considering moving some circuit boards to China for manufacturing &assembly?



Would you opening another door to add one more EMS PCBA partner for evaluation?



We appreciate your interest and are here if you have any questions



Looking forward to your reply.









Diana Dai

Project Representative | ABIS Circuits Co., Ltd



Rigid PCB, Flex PCB, Rigid-Flex 1~32 Layer PCB, Metal PCB, HDI PCB, PCBA

Mobile / Whatsapp / Wechat: +86 13510754753

Email: sales23@abiscircuits.com / diana@abiscircuits.cn

Website: abiscircuits.com









Nigerian spam Part 2





This is a multi-part message in MIME format



--c8mETELxN=_xl33ZIoXc7YMbNIcmyZPW9H

Content-Type: text/plain; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable





Dear Friend,

As you very well know, after the US and Iran war. Iraq is gradually un=

dergoing a rebuilding process in some parts and there is much need for=

reconstruction. I am Bill Betterman from the hospitality state (Missi=

ssippi), an army contractor attached to the US Military force for the =

sole purpose of Reconstruction works in some parts of Iraq. I evaluate=

the level of destruction and offer professional advice inline with th=

e way they intend rebuilding. With no doubt, work has been risky and c=

hallenging as we sometimes collide head on with armed insurgents and l=

oose some soldiers during confrontation.

On the early hours of 25th June 2026 I lost a friend whom I had known =

for 12years during one of these confrontations. It was a very sad day =

but at about 1100hrs during a normal inspection routine along Haifa St=

reet, built and occupied by the descendants of late Hussein and one of=

the hide outs of the Al Qaeda and Ayman al-Zawahiri forces. I, along =

side with 3 soldiers proceeded to a marked site and as I commenced eva=

luation under close guard by the 3 soldiers, I discovered an unusual b=

ulge in a cellar, which I presumed to be storage room and as I proceed=

ed to have a closer look at it, I kicked a metal covering and found se=

veral metal boxes (6 in number)Piled on top each other and locked with=

a padlock. On forcing the boxes open, we discovered several armored w=

eapons including bullets. One of the boxes was filled with hard drugs =

(heroine) and two to my amazement was filled with money. On discovery =

of this money, I and the soldiers for hours counted bundles of the cur=

rencies which amounted to about $10.5M.I believe however that all thes=

e belongs to the Al Qaeda and Ayman al-Zawahiri forces, and because of=

this reason, I instructed the soldiers with me to handover all the bo=

xes containing the drugs and amours to our superiors in the US army an=

d agreed to keep the funds to ourselves, so as to help establish ourse=

lves when we return from Iraq. Presently, we have the money hidden in =

a safe and untraceable location only known to us.

Why I am explaining all our findings to you is to seek for your assist=

ance and immense contribution to the actualization of our dream of get=

ting these funds out from here. We are in desperate need of a reliable=

and trustworthy person who will receive, secure and protect these box=

es containing the money for us until our assignment ends here. Since I=

raq is getting unsafe and more dangerous everyday, we cannot afford to=

leave these boxes here in Iraq for any reason and knowing fully well =

that these were funds used in sponsoring terrorist attacks on our inno=

cent citizens. We have no idea what could happen next. This is a true =

story of what we came across here in Iraq. I intend to include some pi=

ctures I took here and my ID's issued by the US army and government fo=

r you to know better whom you are dealing with but I will include that=

in my next email to you. I assure and promise to give you 20% of this=

fund before sharing with the other 3 soldiers when we leave this plac=

e. However, you are free to negotiate on what you wish to have as your=

percentage in this deal. Please assure me of your keeping this top mo=

st secret so that my job would not be jeopardized.

My Sincere Regards,

Bill Betterman.



--c8mETELxN=_xl33ZIoXc7YMbNIcmyZPW9H

Content-Type: text/html; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable








8859-1">


t=3D"width=3Ddevice-width, initial-scale=3D1">
ection content=3Dtelephone=3Dno> 2ND JULY 26



Dear =

Friend,
 
As you very well know, after the US and Iran war.=

Iraq is gradually undergoing a rebuilding process in some parts and t=

here is much need for reconstruction. I am Bill Betterman from the hos=

pitality state (Mississippi), an army contractor attached to the US Mi=

litary force for the sole purpose of Reconstruction works in some part=

s of Iraq. I evaluate the level of destruction and offer professional =

advice inline with the way they intend rebuilding. With no doubt, work=

has been risky and challenging as we sometimes collide head on with a=

rmed insurgents and loose some soldiers during confrontation.
 =

;
On the early hours of 25th June 2026 I lost a friend whom I had k=

nown for 12years during one of these confrontations. It was a very sad=

day but at about 1100hrs during a normal inspection routine along Hai=

fa Street, built and occupied by the descendants of late Hussein and o=

ne of the hide outs of the Al Qaeda and Ayman al-Zawahiri forces. I, a=

long side with 3 soldiers proceeded to a marked site and as I commence=

d evaluation under close guard by the 3 soldiers, I discovered an unus=

ual bulge in a cellar, which I presumed to be storage room and as I pr=

oceeded to have a closer look at it, I kicked a metal covering and fou=

nd several metal boxes (6 in number)Piled on top each other and locked=

with a padlock. On forcing the boxes open, we discovered several armo=

red weapons including bullets. One of the boxes was filled with hard d=

rugs (heroine) and two to my amazement was filled with money. On disco=

very of this money, I and the soldiers for hours counted bundles of th=

e currencies which amounted to about $10.5M.I believe however that all=

these belongs to the Al Qaeda and Ayman al-Zawahiri forces, and becau=

se of this reason, I instructed the soldiers with me to handover all t=

he boxes containing the drugs and amours to our superiors in the US ar=

my and agreed to keep the funds to ourselves, so as to help establish =

ourselves when we return from Iraq. Presently, we have the money hidde=

n in a safe and untraceable location only known to us.
 
Wh=

y I am explaining all our findings to you is to seek for your assistan=

ce and immense contribution to the actualization of our dream of getti=

ng these funds out from here. We are in desperate need of a reliable a=

nd trustworthy person who will receive, secure and protect these boxes=

containing the money for us until our assignment ends here. Since Ira=

q is getting unsafe and more dangerous everyday, we cannot afford to l=

eave these boxes here in Iraq for any reason and knowing fully well th=

at these were funds used in sponsoring terrorist attacks on our innoce=

nt citizens. We have no idea what could happen next. This is a true st=

ory of what we came across here in Iraq. I intend to include some pict=

ures I took here and my ID's issued by the US army and government for =

you to know better whom you are dealing with but I will include that i=

n my next email to you. I assure and promise to give you 20% of this f=

und before sharing with the other 3 soldiers when we leave this place.=

However, you are free to negotiate on what you wish to have as your p=

ercentage in this deal. Please assure me of your keeping this top most=

secret so that my job would not be jeopardized.
 
My Since=

re Regards,
Bill Betterman.







--c8mETELxN=_xl33ZIoXc7YMbNIcmyZPW9H--



Nigerian spam Part 1

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 02 Jul 2026 14:41:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wfOCp-00000000Ar8-1XMx

for dave@doctor.nl2k.ab.ca;

Thu, 02 Jul 2026 14:40:19 -0600

Resent-From: The Doctor

Resent-Date: Thu, 2 Jul 2026 14:40:19 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from zmpro02.xinet.com.mx ([174.142.1.133]:47728)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wfMar-0000000006R-3GBp

for root@nk.ca;

Thu, 02 Jul 2026 12:57:11 -0600

Received: from zmpro02.xinet.com.mx (localhost [127.0.0.1])

by zmpro02.xinet.com.mx (Postfix) with ESMTPS id 4DF7FA0CDB3

for ; Thu, 2 Jul 2026 12:47:42 -0600 (CST)

Received: from localhost (localhost [127.0.0.1])

by zmpro02.xinet.com.mx (Postfix) with ESMTP id DECECA0D8BF

for ; Thu, 2 Jul 2026 12:37:07 -0600 (CST)

DKIM-Filter: OpenDKIM Filter v2.10.3 zmpro02.xinet.com.mx DECECA0D8BF

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mni.com.mx;

s=F4CC644C-E323-11EE-9674-16FFEBD47E3E; t=1783017427;

bh=unG/Wy+WPpflmnO2EXJHflgG7whfu8zE8+nMCtqCFIM=;

h=From:To:MIME-Version:Date:Message-Id;

b=d69fOJg7YfJ3eGmfUEUyHITlQCCc2A0nDzzRqHi3C5l2tKzDHDBTQQ93AbHLKsga3

UTMQdpkar7savfwLwvMYUX6oELs59RcPlL9qlBw1Kv70iV7BLnuvmHRBavJHNzri9q

B2uP2tNuftCeMT5pG/CyzgDx/mj3UtnYZGbBPF4CmghsS/5XSsW+HRwn+a4x18IFMu

mJahlANASqK7y4NnW64Cv0vRZXrl0l/becem9FmeEPjdH3J931adlO+NA/b8a74QHq

31IX6Y41M1u1abIConqEOz1EJNpbTmqln6qaWRMCoO/OHiXws+VkKmC0W0Mt/WCGZZ

75PERln5sqEUA==

X-Virus-Scanned: amavis at zmpro02.xinet.com.mx

Received: from zmpro02.xinet.com.mx ([127.0.0.1])

by localhost (zmpro02.xinet.com.mx [127.0.0.1]) (amavis, port 10026)

with ESMTP id cT_QnlebO1hI for ;

Thu, 2 Jul 2026 12:37:07 -0600 (CST)

Received: from nfwsodru-54027 (unknown [23.94.82.24])

by zmpro02.xinet.com.mx (Postfix) with ESMTPSA id A00D3A0D89A

for ; Thu, 2 Jul 2026 12:37:07 -0600 (CST)

From: "Bill Betterman"

Subject: 2ND JULY 26

To:

Content-Type: multipart/alternative; boundary="c8mETELxN=_xl33ZIoXc7YMbNIcmyZPW9H"

MIME-Version: 1.0

Reply-To:

Date: Thu, 2 Jul 2026 20:37:07 +0200

Message-Id: <02072026073720CC4248F739$DD3DA5B5B3@NFWSODRU>

X-Spam_score: 17.3

X-Spam_score_int: 173

X-Spam_bar: +++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dear Friend, As you very well know, after the US and Iran

war. Iraq is gradually undergoing a rebuilding process in some parts and

there is much need for reconstruction. I am Bill Betterman from the [...]



Content analysis details: (17.3 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[174.142.1.133 listed in dnsbl.ahbl.org]

[174.142.1.133 listed in dnsbl.ahbl.org]

[174.142.1.133 listed in dnsbl.ahbl.org]

[174.142.1.133 listed in dnsbl.ahbl.org]

[23.94.82.24 listed in dnsbl.ahbl.org]

[23.94.82.24 listed in dnsbl.ahbl.org]

[23.94.82.24 listed in dnsbl.ahbl.org]

[23.94.82.24 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[174.142.1.133 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[174.142.1.133 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[174.142.1.133 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[174.142.1.133 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[23.94.82.24 listed in will-spam-for-food.eu.org]

[23.94.82.24 listed in will-spam-for-food.eu.org]

[23.94.82.24 listed in will-spam-for-food.eu.org]

[23.94.82.24 listed in will-spam-for-food.eu.org]

[23.94.82.24 listed in will-spam-for-food.eu.org]

[23.94.82.24 listed in will-spam-for-food.eu.org]

[23.94.82.24 listed in will-spam-for-food.eu.org]

[23.94.82.24 listed in will-spam-for-food.eu.org]

[174.142.1.133 listed in will-spam-for-food.eu.org]

[174.142.1.133 listed in will-spam-for-food.eu.org]

[174.142.1.133 listed in will-spam-for-food.eu.org]

[174.142.1.133 listed in will-spam-for-food.eu.org]

[174.142.1.133 listed in will-spam-for-food.eu.org]

[174.142.1.133 listed in will-spam-for-food.eu.org]

[174.142.1.133 listed in will-spam-for-food.eu.org]

[174.142.1.133 listed in will-spam-for-food.eu.org]

1.6 RCVD_IN_BRBL_LASTEXT RBL: No description available.

[174.142.1.133 listed in bb.barracudacentral.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net

[Blocked - see ]

1.5 RCVD_IN_CBL RBL: Received via a relay in cbl.abuseat.org

[Listed by XBL, see ]

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[23.94.82.24 listed in sbl-xbl.spamhaus.org]

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

-0.0 SPF_PASS SPF: sender matches SPF record

0.5 NO_RDNS Sending MTA has no reverse DNS (Postfix variant)

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[174.142.1.133 listed in bl.score.senderscore.com]

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[bbetterman0(at)gmail.com]

1.6 SUBJ_ALL_CAPS Subject is all capitals

0.6 J_CHICKENPOX_65 BODY: 6alpha-pock-5alpha

2.6 DEAR_FRIEND BODY: Dear Friend? That's not very dear!

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.0 LOTS_OF_MONEY Huge... sums of money

0.0 NO_RDNS2 Sending MTA has no reverse DNS

2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From

0.0 T_MONEY_PERCENT X% of a lot of money for you

0.0 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?

0.0 MONEY_FRAUD_5 Lots of money and many fraud phrases

1.8 ADVANCE_FEE_4_NEW_MONEY Advance Fee fraud and lots of money

Subject: {SPAM?} 2ND JULY 26

nigerian spam Part 2





This is a multi-part message in MIME format



--c8mETELxN=_xl33ZIoXc7YMbNIcmyZPW9H

Content-Type: text/plain; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable





Dear Friend,

As you very well know, after the US and Iran war. Iraq is gradually un=

dergoing a rebuilding process in some parts and there is much need for=

reconstruction. I am Bill Betterman from the hospitality state (Missi=

ssippi), an army contractor attached to the US Military force for the =

sole purpose of Reconstruction works in some parts of Iraq. I evaluate=

the level of destruction and offer professional advice inline with th=

e way they intend rebuilding. With no doubt, work has been risky and c=

hallenging as we sometimes collide head on with armed insurgents and l=

oose some soldiers during confrontation.

On the early hours of 25th June 2026 I lost a friend whom I had known =

for 12years during one of these confrontations. It was a very sad day =

but at about 1100hrs during a normal inspection routine along Haifa St=

reet, built and occupied by the descendants of late Hussein and one of=

the hide outs of the Al Qaeda and Ayman al-Zawahiri forces. I, along =

side with 3 soldiers proceeded to a marked site and as I commenced eva=

luation under close guard by the 3 soldiers, I discovered an unusual b=

ulge in a cellar, which I presumed to be storage room and as I proceed=

ed to have a closer look at it, I kicked a metal covering and found se=

veral metal boxes (6 in number)Piled on top each other and locked with=

a padlock. On forcing the boxes open, we discovered several armored w=

eapons including bullets. One of the boxes was filled with hard drugs =

(heroine) and two to my amazement was filled with money. On discovery =

of this money, I and the soldiers for hours counted bundles of the cur=

rencies which amounted to about $10.5M.I believe however that all thes=

e belongs to the Al Qaeda and Ayman al-Zawahiri forces, and because of=

this reason, I instructed the soldiers with me to handover all the bo=

xes containing the drugs and amours to our superiors in the US army an=

d agreed to keep the funds to ourselves, so as to help establish ourse=

lves when we return from Iraq. Presently, we have the money hidden in =

a safe and untraceable location only known to us.

Why I am explaining all our findings to you is to seek for your assist=

ance and immense contribution to the actualization of our dream of get=

ting these funds out from here. We are in desperate need of a reliable=

and trustworthy person who will receive, secure and protect these box=

es containing the money for us until our assignment ends here. Since I=

raq is getting unsafe and more dangerous everyday, we cannot afford to=

leave these boxes here in Iraq for any reason and knowing fully well =

that these were funds used in sponsoring terrorist attacks on our inno=

cent citizens. We have no idea what could happen next. This is a true =

story of what we came across here in Iraq. I intend to include some pi=

ctures I took here and my ID's issued by the US army and government fo=

r you to know better whom you are dealing with but I will include that=

in my next email to you. I assure and promise to give you 20% of this=

fund before sharing with the other 3 soldiers when we leave this plac=

e. However, you are free to negotiate on what you wish to have as your=

percentage in this deal. Please assure me of your keeping this top mo=

st secret so that my job would not be jeopardized.

My Sincere Regards,

Bill Betterman.



--c8mETELxN=_xl33ZIoXc7YMbNIcmyZPW9H

Content-Type: text/html; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable








8859-1">


t=3D"width=3Ddevice-width, initial-scale=3D1">
ection content=3Dtelephone=3Dno> 2ND JULY 26



Dear =

Friend,
 
As you very well know, after the US and Iran war.=

Iraq is gradually undergoing a rebuilding process in some parts and t=

here is much need for reconstruction. I am Bill Betterman from the hos=

pitality state (Mississippi), an army contractor attached to the US Mi=

litary force for the sole purpose of Reconstruction works in some part=

s of Iraq. I evaluate the level of destruction and offer professional =

advice inline with the way they intend rebuilding. With no doubt, work=

has been risky and challenging as we sometimes collide head on with a=

rmed insurgents and loose some soldiers during confrontation.
 =

;
On the early hours of 25th June 2026 I lost a friend whom I had k=

nown for 12years during one of these confrontations. It was a very sad=

day but at about 1100hrs during a normal inspection routine along Hai=

fa Street, built and occupied by the descendants of late Hussein and o=

ne of the hide outs of the Al Qaeda and Ayman al-Zawahiri forces. I, a=

long side with 3 soldiers proceeded to a marked site and as I commence=

d evaluation under close guard by the 3 soldiers, I discovered an unus=

ual bulge in a cellar, which I presumed to be storage room and as I pr=

oceeded to have a closer look at it, I kicked a metal covering and fou=

nd several metal boxes (6 in number)Piled on top each other and locked=

with a padlock. On forcing the boxes open, we discovered several armo=

red weapons including bullets. One of the boxes was filled with hard d=

rugs (heroine) and two to my amazement was filled with money. On disco=

very of this money, I and the soldiers for hours counted bundles of th=

e currencies which amounted to about $10.5M.I believe however that all=

these belongs to the Al Qaeda and Ayman al-Zawahiri forces, and becau=

se of this reason, I instructed the soldiers with me to handover all t=

he boxes containing the drugs and amours to our superiors in the US ar=

my and agreed to keep the funds to ourselves, so as to help establish =

ourselves when we return from Iraq. Presently, we have the money hidde=

n in a safe and untraceable location only known to us.
 
Wh=

y I am explaining all our findings to you is to seek for your assistan=

ce and immense contribution to the actualization of our dream of getti=

ng these funds out from here. We are in desperate need of a reliable a=

nd trustworthy person who will receive, secure and protect these boxes=

containing the money for us until our assignment ends here. Since Ira=

q is getting unsafe and more dangerous everyday, we cannot afford to l=

eave these boxes here in Iraq for any reason and knowing fully well th=

at these were funds used in sponsoring terrorist attacks on our innoce=

nt citizens. We have no idea what could happen next. This is a true st=

ory of what we came across here in Iraq. I intend to include some pict=

ures I took here and my ID's issued by the US army and government for =

you to know better whom you are dealing with but I will include that i=

n my next email to you. I assure and promise to give you 20% of this f=

und before sharing with the other 3 soldiers when we leave this place.=

However, you are free to negotiate on what you wish to have as your p=

ercentage in this deal. Please assure me of your keeping this top most=

secret so that my job would not be jeopardized.
 
My Since=

re Regards,
Bill Betterman.







--c8mETELxN=_xl33ZIoXc7YMbNIcmyZPW9H--